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IVE BEEN IN THIS 
GAME FOR YEARS 
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THE GAME: CY B E R S E C U R ITY 2000 


• Cleanup after breaches 

• Usually by script kiddies w/ egg drops 

• Clean up malware 

• Sometimes by cybercriminals 

• Coordinate vulnerability disclosure 

• (At least this one has been solved) 


THEN, ONE DAY 


THE GAME GOT WEIRD 


THE GAME GOT BIG 


THE GREAT GAME 
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ALSO APT 
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INEVITABLE 


INFORMATION WANTS 
TO BE FREED 



WE'RE HERE 


NOW WHAT? 


THE GREAT CYBER GAME 


CYBERWAR 













WELL THAT SUCKS 


WHY SO VERY WRONG? 


NEW DOMAINS OF 
CONFLICT 


ARE INFREQUENT 


HARD TO PREDICT 


THEORY MEETS PRAXIS 


THIS HAS 
BEFORE 


HAPPENED 


AN ANALOGY 


A NEW DOMAIN OF 
CONFLICT 





AIR POWER 1915: TECHNOLOGY 


• Airplanes were basically motorised kites 

• No weapons 

• Used for reconnaissance 

• Critical to accurate artillery fire 


AIR POWER: TACTICAL THEORY 


• Highly skilled pilots 

• Highly manoeuvrable planes 

• Battle for supremacy in bouts of skill and daring 

• Takeaway 

• Build highly manoeuvrable planes 


PRACTICE... 


AIR POWER 1917: EXPERIENCE 


• Practical rules for air war 

• Boelke Dicta 

• Similar rules from Western aces 

• Proven in the crucible 

• Concerned only with winning, not chivalry 

• Takeaway 

• Fast planes that can climb high 


DICTA BOELKE 


• Secure the upper hand before attacking 

• Always continue an attack you have begun 

• Only fire at close range, when target is in si 

• Always keep an eye on your opponent 


DICTA BOELKE CONT. 


• In any attack, attack from behind 

• If opponent dives on you, turn to meet the attack 

• When over enemy lines, never forget line of retreat 


• Attack in groups 


"There are two types of planes: fighters, and 

targets" 


AIR FORCE SAYING 



































OVERWHELM THE WEAK 


GO IN QUICK 


HIT HARD 


GET OUT 


TACTICAL CYBER 




















CYBER CONFLICT 2015: PRACTICE 


• Experience has produced some basic rules about 
winning 

• Hit the softest targets the hardest 


TARGETED ATTACK DEMO 
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QUANTUM 


• Why does NSA hit browsers? 

• Targeted 

• Easy* 


It works 


APT 


• Why does Asia Pacific Threat do spear phishing? 

• Targeted 

• Easy 


It works 


EVERYONE 


• Why do all* nation states use phishing? 

• Targeted 

• Easy 


It works 


WHAT WORKS 


• Client sides 

• Spear/phishing 

• Browsers 

• USB 

• Web Apps 

• Other: 

• Interdiction, telnet sniffing, big boy stuff.. 
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OVERWHELM THE WEAK 


GO IN QUICKLY 


HIT HARD 


GET OUT 





OPERATION PHASES 


• planning 

• preparation 

• execution 

• finish 


SPEC OPS 


• simplicity 

• security 

• repetition 

• surprise 

• speed 


purpose 
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TOOLCHAINS 


• An investment and an expense 
• Constant maintenance 

• Tools, Techniques & Procedures are Commitments 















STRATEGIC CYBER 


"data packets are like bullets and your walls of fire 
are like the armor that repels them . 11 

-TWO STAR GENERAL, CYBER COMMAND 



THE TECHNICAL MEANS OF WARFARE 

AERONAUTICS OPENED up to men a new field of ac¬ 
tion, the field of the air. In so doing it of necessity created 
a new battlefield; for wherever two men meet, conflict is 
inevitable. In actual fact, aeronautics was widely em¬ 
ployed in warfare long before any civilian use was made 
of it.[7] Still in its infancy at the outbreak of the World 
War, this new science received then a powerful impetus 
to military development. 

The practical use of the air arm was at first only 
vaguely understood. This new arm had sprung suddenly 
into the field of war; and its characteristics, radically 
different from those of any other arm employed up to 
that time, were still undefined. Very few possibilities of 
this new instrument of war were recognized when it first 
appeared. Many people took the extreme position that it 
was impossible to fight in the air; others admitted only 
that it might prove a useful auxiliary to already existing 
means of war. 


WHAT CAN HELP? 
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INFOSEC INDUSTRY 


DISASTERT'OURISTS 


CISSP 

GOOD 
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NATIONAL INTELLIGENCE AGENCIES 


DON'T LOVE YOU 
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WHAT WORKS 






































VAULT DOOR 


WEIGHT 22 1 2 Tons 
THICKNESS 22 Inches 

STEEL 11 Layers of Special 

Cutting and Drill Resistant 

LOCKS 4 Hamilton Watch 

Movements for Time Locks 
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THANK YOU 


